Skip to content
OpenAdvisories
Medium ELSA-2026-0525 1 CVE

Moderate: postgresql16 security update (Oracle Linux 10)

Published Jan 13, 2026 · Updated Jan 13, 2026

Summary

[16.11-1.0.1]
- Replace upstream reference [Orabug: 37044148]

[16.11-1]
- Update to 16.11

[16.10-3]
- Add tmpfiles.d configuration for PostgreSQL 16
- Ensures proper directory permissions for /var/lib/pgsql

[16.10-2]
- Add OpenSSL support to upgrade_configure function
- This ensures upgrade server is compiled with OpenSSL support
- Required for SSL/TLS connections during database upgrades

Fixed packages 15

ReleasePackageFixed in
Oracle Linux · 10 postgresql 0:16.11-1.0.1.el10_1
Oracle Linux · 10 postgresql-contrib 0:16.11-1.0.1.el10_1
Oracle Linux · 10 postgresql-docs 0:16.11-1.0.1.el10_1
Oracle Linux · 10 postgresql-plperl 0:16.11-1.0.1.el10_1
Oracle Linux · 10 postgresql-plpython3 0:16.11-1.0.1.el10_1
Oracle Linux · 10 postgresql-pltcl 0:16.11-1.0.1.el10_1
Oracle Linux · 10 postgresql-private-devel 0:16.11-1.0.1.el10_1
Oracle Linux · 10 postgresql-private-libs 0:16.11-1.0.1.el10_1
Oracle Linux · 10 postgresql-server 0:16.11-1.0.1.el10_1
Oracle Linux · 10 postgresql-server-devel 0:16.11-1.0.1.el10_1
Oracle Linux · 10 postgresql-static 0:16.11-1.0.1.el10_1
Oracle Linux · 10 postgresql-test 0:16.11-1.0.1.el10_1
Oracle Linux · 10 postgresql-test-rpm-macros 0:16.11-1.0.1.el10_1
Oracle Linux · 10 postgresql-upgrade 0:16.11-1.0.1.el10_1
Oracle Linux · 10 postgresql-upgrade-devel 0:16.11-1.0.1.el10_1

Vulnerabilities 1

  • Medium 5.9

    PostgreSQL libpq undersizes allocations, via integer wraparound

    Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for …